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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set forth in 
37 CFR 1.17(e), was filed in this application after final rejection. Since this application is 
eligible for continued examination under 37 CFR 1.1 14, and the fee set forth in 37 CFR 1.17(e) 
has been timely paid, the finality of the previous Office action has been withdrawn pursuant to 
37 CFR 1.114. Applicant's submission filed on 12/23/2010 has been entered. 

Response to Arguments 

2. Applicant's arguments have been fully considered but they are not persuasive. 
With respect to the arguments/remarks presented on pages 10-12 of the 

argument/remarks section, applicant amends the independent claims to recite the limitation "the 
at least one sensitive file cannot be accessed when access is being prevented" and argues that 
McBrearty teaches the owner of the file accessing the file when access is being prevented. 
Applicant cites Col 4, lines 49-53 and asserts that the file owner accesses the file when the access 
is being prevented. This is not disclosed by McBrearty. After McBrearty process detects the 
unauthorized attempt and blocks/locks access to the file by renaming the file and moving the file 
to a covert location, McBrearty explicitly states that the owner is notified (of the prevention task 
taken i.e. name/location change). McBrearty does not disclose either explicitly or inherently that 
the owner of the file accesses the file (when access is being prevented) after it has been renamed 
and moved to a covert location. The owner is notified of the file and the tasks taken on the file 
but the owner does not access the file according to the disclosure by McBrearty (See Fig 4, Col 
4, Line 49-53 and Col 5, Line 45-48). Equating the phrase "notifying the owner of the change" to 
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"the owner accessing the file" is not what is disclosed by McBrearty because notifying an owner 
or making a log of a filename change is not the same as the owner accessing the file. Applicant's 
added interpretation/commentary (the purpose of notifying the owner of the file is so that the 
owner can access the file in its new location) to the disclosure is not acceptable because such 
limitation is not disclosed by McBrearty. According to McBrearty, when the unauthorized access 
is determined, an access prevention task such as renaming the file and moving it to a new 
location is performed (the file continues to be stored on the device) and the owner is notified of 
the change or a log is made of the unauthorized access attempt and prevention task taken. 
Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1-3, 5-6 and 8-20 are rejected under 35 U.S.C. 102(b) as being anticipated by 
McBrearty et al. (US-7647402) 

a. Referring to claim 1, 13, 15 and 18: 

Regarding claim 1 and similar claims 13, 15 and 18, McBrearty teaches in a computing 
device, a method for protecting sensitive files from unauthorized access Col 2, Line 45-56. . . . 
Protecting sensitive files from unauthorized access), comprising: detecting a connection of the 
computing device to an electronic device; accessing an authorized connection list (Col 5, Line 
29-43 . . . connection of a computing device to a database server based on an authorized list); 
determining whether the connection is identified in the authorized connection list; and if the 
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connection is not identified in the authorized connection list (Col 5, Line 29-63 . . . when a file 
request is made, a determination is made if the connection was authenticated based on the 
authorized list): accessing sensitive file information which identifies at least one sensitive file 
stored on the computing device, wherein the sensitive file is not identified until after the 
connection has been identified as not being in the authorized connection list (Col 5, Line 30- 

63 a connection request is first made to a file server and the requester is checked against an 

authorized list, after that, a file is requested and based on the authentication (authorized list), 
access to file is allowed or prevented)^_and preventing access to the at least one sensitive file 
identified by the sensitive file information by performing an access prevention task after the 
connection is not identified in the authorized connection list, wherein the at least one sensitive 
file continues to be stored on the computing device but the at least one sensitive file cannot be 
accessed when access is being prevented (See the response to argument and See Fig 4, Col 4, 
Line 49-53 and Col 5, Line 45-48, Col 6, Line 10-19.... preventing access to the file by 
performing a prevention task if the requester is not authorized/identified (by the authorized list) 
and the file continues to be stored on the database), 
a. Referring to claim 2, 16 and 19: 

Regarding claim 2, McBrearty teaches the method of claim 1, wherein if the connection 
is not identified in the authorized connection list the method further comprises: detecting 
termination of the connection; and if the computing device does not have any other unauthorized 
connections, restoring access to the at least one sensitive file identified by the sensitive file 
information (Col 6, Line 21-26. .. . following termination of the session, restoring the server to 
normal operations). 
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a. Referring to claim 3: 

Regarding claim 3, McBrearty teaches the method of claim 1, wherein the connection 
occurs via a computer network (Col 3, Line 64 thru Col 4, Line 19). 
a. Referring to claim 5: 

Regarding claim 5, McBrearty teaches the method of claim 1, wherein the connection is a 
direct connection (Col 5, Line 30-33. .. direct system to database connection), 
a. Referring to claim 6, 8, 17 and 20: 

Regarding claim 1, McBrearty teaches the method of claim 1, wherein the access 
prevention task comprises locking the at least one sensitive file (Col 6, Line 10-19.... Access 
prevention task such as renaming the file, hiding the file or moving the file to another location) 
a. Referring to claim 9 and 10: 

Regarding claim 1, McBrearty teaches the method of claim 1, wherein the sensitive file 
information is a reference to a directory in which the at least one sensitive file is stored (Col 3, 
Line 58-64). 

a. Referring to claim 1 1 and 12: 

Regarding claim 1, McBrearty teaches the method of claim 1, wherein the authorized 
connection list comprises a list of at least one authorized network (Col 3, Line 64 thru Col 4, 
Line 11.... authorization for a network and type such as internet web connection), 
a. Referring to claim 14: 

Regarding claim 14, McBrearty teaches the method of claim 13, further comprising: 
providing the authorized connection list; providing the sensitive file information; and 
transmitting the authorized connection list and the sensitive file information to the plurality of 
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computing devices via the enterprise network (Col 5, Line 29-42. . . . Providing the connection list 
and protected file). 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claim 4 is rejected under 35 U.S.C. 103(a) as being unpatentable over McBrearty et al. 
(US-7647402), and further in view of Elliott et al. (US-20030056095). 

a. Referring to claim 4: 

Regarding claim 4, McBrearty teaches the method of claim 3. 

McBrearty does not teach the connection network as a wireless network and the device as 
a mobile device. However, Elliott teaches a method of securing encrypted files from 
unauthorized access where the connection is made through a wireless network and by a mobile 
device (See Elliott, Para 22). Therefore, it would have been obvious to modify McBrearty's 
method and invention to include support for a wireless network and a mobile device as the client 
as taught by Elliott for the purpose of improving the system by incorporating wireless devices as 
client device making request for access to files on the sever. 

7. Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over McBrearty et al. 
(US-7647402), and further in view of Kung (US-5265159) 

a. Referring to claim 7: 
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Regarding claim 7, McBrearty teaches performing an access prevention task on a 
sensitive file when an unauthorized access is made to the file. McBrearty does not teach one of 
the access prevention tasks as encrypting the sensitive file. However, deletion of sensitive file by 
encrypting the files to prevent unauthorized access to the file is well known in the art. For 
instance, Kung discloses an access prevention task of deleting a file by encrypting the file to 
prevent unauthorized access to it (See Kung, Abstract). Therefore, one of ordinary skill would be 
motivated to modify McBrearty' s access prevention task to include the task of encrypting the file 
to prevent access to the file thereby protecting the file from unauthorized access. 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to IZUNNA OKEKE whose telephone number is (571) 270-3854. 
The examiner can normally be reached on Monday - Thursday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 270-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/IZUNNA OKEKE/ 
Examiner, Art Unit 2432 



/Minh Dinh/ 

Primary Examiner, Art Unit 2432 



